In a hybrid Azure AD environment, Group Policy is taking precedence over Intune settings on 50 Windows 10 devices. What should you do so Intune settings override Group Policy?

To ensure Intune settings take precedence over Group Policy in a hybrid Azure AD environment, you should use a custom device profile in Intune. This allows you to deploy OMA-URI (Open Mobile Alliance Uniform Resource Identifier) settings that directly configure the Windows 10 devices. When Intune and Group Policy both manage the same setting, Intune's OMA-URI settings, especially those deployed via custom profiles, are often designed to override local Group Policy settings on modern Windows devices, particularly if the device is Azure AD joined or hybrid Azure AD joined. Configuring Group Policy settings (either Computer or User Configuration) in the Default Domain Policy would reinforce Group Policy's control, not diminish it. An Administrative Templates device profile in Intune uses ADMX-backed policies, which are often designed to coexist or be overridden by Group Policy, rather than explicitly override it in all scenarios.